From 01fb98ba10ebc098edcbe256b9766650297bd911 Mon Sep 17 00:00:00 2001
From: Chris Kruining <c.kruining@4dotnet.nl>
Date: Tue, 24 Mar 2026 07:30:41 +0100
Subject: [PATCH] various fixes

---
 .../nixos/services/media/glance/default.nix   |  2 +-
 .../nixos/services/media/servarr/default.nix  | 73 +------------------
 systems/x86_64-linux/orome/default.nix        | 10 ++-
 3 files changed, 11 insertions(+), 74 deletions(-)

diff --git a/modules/nixos/services/media/glance/default.nix b/modules/nixos/services/media/glance/default.nix
index ec6e851..b042297 100644
--- a/modules/nixos/services/media/glance/default.nix
+++ b/modules/nixos/services/media/glance/default.nix
@@ -15,7 +15,7 @@ in {
   config = mkIf cfg.enable {
     ${namespace}.services.networking.caddy.hosts = {
       "https://${config.networking.hostName}:443" = ''
-        reverse_proxy http://[::]:2000
+        reverse_proxy http://[::1]:2000
       '';
     };
 
diff --git a/modules/nixos/services/media/servarr/default.nix b/modules/nixos/services/media/servarr/default.nix
index ba03076..c7a066c 100644
--- a/modules/nixos/services/media/servarr/default.nix
+++ b/modules/nixos/services/media/servarr/default.nix
@@ -99,7 +99,9 @@ in {
 
             settings = {
               misc = {
+                host = "0.0.0.0";
                 port = 2009;
+                host_whitelist = "${config.networking.hostName}";
 
                 download_dir = "/var/media/downloads/incomplete";
                 complete_dir = "/var/media/downloads/done";
@@ -315,77 +317,6 @@ in {
                                 }
                               ];
                             };
-
-                            # "_1337x" = {
-                            #   enable = true;
-
-                            #   app_profile_id = 1;
-                            #   priority = 1;
-
-                            #   name = "1337x";
-                            #   implementation = "Cardigann";
-                            #   config_contract = "CardigannSettings";
-                            #   protocol = "torrent";
-                            #   tags = [1];
-
-                            #   fields = [
-                            #     {
-                            #       name = "definitionFile";
-                            #       text_value = "1337x";
-                            #     }
-                            #     {
-                            #       name = "baseSettings.limitsUnit";
-                            #       number_value = 0;
-                            #     }
-                            #     {
-                            #       name = "torrentBaseSettings.preferMagnetUrl";
-                            #       bool_value = false;
-                            #     }
-                            #     {
-                            #       name = "disablesort";
-                            #       bool_value = false;
-                            #     }
-                            #     {
-                            #       name = "sort";
-                            #       number_value = 2;
-                            #     }
-                            #     {
-                            #       name = "type";
-                            #       number_value = 1;
-                            #     }
-                            #   ];
-                            # };
-
-                            # "nzbgeek" = {
-                            #   enable = true;
-
-                            #   app_profile_id = 2;
-                            #   priority = 1;
-
-                            #   name = "NZBgeek";
-                            #   implementation = "Newznab";
-                            #   config_contract = "NewznabSettings";
-                            #   protocol = "usenet";
-
-                            #   fields = [
-                            #     {
-                            #       name = "baseUrl";
-                            #       text_value = "https://api.nzbgeek.info";
-                            #     }
-                            #     {
-                            #       name = "apiPath";
-                            #       text_value = "/api";
-                            #     }
-                            #     {
-                            #       name = "apiKey";
-                            #       text_value = "__TODO_API_KEY_SECRET__";
-                            #     }
-                            #     {
-                            #       name = "baseSettings.limitsUnit";
-                            #       number_value = 5;
-                            #     }
-                            #   ];
-                            # };
                           };
                         }
                       ]
diff --git a/systems/x86_64-linux/orome/default.nix b/systems/x86_64-linux/orome/default.nix
index 48e049b..e155461 100644
--- a/systems/x86_64-linux/orome/default.nix
+++ b/systems/x86_64-linux/orome/default.nix
@@ -1,16 +1,22 @@
-{ ... }:
-{
+{pkgs, ...}: {
   imports = [
     ./disks.nix
     ./hardware.nix
   ];
 
+  environment.systemPackages = with pkgs; [
+    azure-cli
+    github-copilot-cli
+  ];
+
   sneeuwvlok = {
     hardware.has = {
       bluetooth = true;
       audio = true;
     };
 
+    authentication.himmelblau.enable = true;
+
     application = {
       steam.enable = true;
     };